Configuration Procedure; Verifying The Configuration - H3C S5500-EI Series Security Configuration Manual

Configure the authentication server to provide authentication, authorization, and accounting
•
services.

Configuration procedure

Configure an IP address for each interface. (Details not shown.)
1.
Configure DHCP relay:
2.
# Enable DHCP.
<Device> system-view
[Device] dhcp enable
# Configure a DHCP server for a DHCP server group.
[Device] dhcp relay server-group 1 ip 192.168.2.2
# Enable the relay agent on VLAN interface 2.
[Device] interface vlan-interface 2
[Device-Vlan-interface2] dhcp select relay
# Correlate VLAN interface 2 to the DHCP server group.
[Device-Vlan-interface2] dhcp relay server-select 1
[Device-Vlan-interface2] quit
Configure a RADIUS scheme and an ISP domain.
3.
For more information about configuration procedure, see
example."
Configure 802.1X:
4.
# Configure the free IP.
[Device] dot1x free-ip 192.168.2.0 24
# Configure the redirect URL for client software download.
[Device] dot1x url http://192.168.2.3
# Enable 802.1X globally.
[Device] dot1x
# Enable 802.1X on the port.
[Device] interface gigabitethernet 1/0/1
[Device-GigabitEthernet1/0/1] dot1x

Verifying the configuration

Use the display dot1x command to display the 802.1X configuration. After the host obtains an IP address
from a DHCP server, use the ping command from the host to ping an IP address on the network segment
specified by free IP.
C:\>ping 192.168.2.3
Pinging 192.168.2.3 with 32 bytes of data:
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
Reply from 192.168.2.3: bytes=32 time<1ms TTL=128
"802.1X authentication configuration
117